Skip to content

Feature Request: Allow disabling 'login by email' #286

@skyguy

Description

@skyguy

Firstly, I'd like to say "Thank you"! Thanks for creating Mox and making it available to the world!

I had been procrastinating on upgrading my server, dreading having to configure DKIM, et al, but mox has made it all so much simpler. I was especially inspired during your FOSDEM talk when you said how mox will check your setup and warn you of problems - that's really useful.

Of course, I do have a request!:

I've always given my users an accountname which is distinct from their real name and email address and is thus never published anywhere. This helps tremendously with stopping crackers from guessing passwords because they first have to guess the correct accountname, so even a poor password is not a great security risk.

It seems with mox that my strategy wouldn't be effective anymore, as crackers can use any published email address to attempt password cracking? (Many of my users use a 'catchall' alias so they can implement my other tip: to give out email addresses as <companyname>@my.domain )

Is it possible to configure mox to have account names seperate from email addresses?

Many thanks
-Kevin

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions